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REMARKS 

Reconsideration of this application is respectfully requested in view of the foregoing 
amendment and the following remarks. 

Claims 1-19 were pending in this application. Claims 12-19 have been cancelled and 
claims 1 an 6-8 have been amended hereby. Support for the amendment to the independent 
claims can be found in, for example, paragraphs, 0032, 0039, 0050, and 0074. No new matter 
has been entered. Upon entry of this amendment, claims 1-11 will be pending herein, with 
claims 1 and 6 being independent. For the reasons stated below, Applicant respectfully submits 
that all claims pending in this application are in condition for allowance. 

In the Office Action, the disclosure was objected to; claims 6-19 were rejected under 35 
U.S.C. § 102(b) as being anticipated by Kolawa; claims 1 and 4-5 were rejected under 35 U.S.C. 
§103(a) as being unpatentable over Wagner in view of Viega; and claims 2 and 3 were rejected 
under 35 U.S.C. §103 (a) as being unpatentable over Wagner and Viega, and further in view of 
Kolawa. To the extent these grounds of rejection might be applied to claims presently pending 
in this application, they are respectfully traversed. 

Applicants have amended paragraph 0017 of the specification to address the concerns 
raised in the Office Action. Accordingly, the objection to the disclosure should be withdrawn. 

Applicants have further amended the independent claims to even more clearly recite 
features of the instant invention. Referring to amended claim 1, for example, the claimed 
invention is directed to a method for certifying software applications by creating a vulnerability 
knowledge database comprising one or more classes of known software vulnerabilities; applying 
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a code parser to the software application to create an abstract syntax tree; comparing the abstract 
syntax tree and the classes of known software vulnerabilities to identify a set of potential 
exploitable software vulnerabilities; performing a static analysis of the source code, wherein the 
static analysis is flow sensitive analysis of a list of constraints, and wherein the results of the 
static analysis comprise a set of exploitable software vulnerabilities; performing a first dynamic 
analysis of the software, wherein the first dynamic analysis comprises a set of tests to achieve 
code coverage ; performing a second dynamic analysis of the software, wherein the second 
dynamic analysis comprises injecting faults into the software while being executed; and 
performing any two of said analysis steps in a pipelined manner . 

Applicants respectfully submit that the prior art of record fails to disclose each of the 
elements recited in the independent claims, let alone in the combination expressly claimed. As 
such, Applicants respectfully request reconsideration and withdrawal of the §102 and §103 
rejections of the claims. 

Should the Examiner have any questions or determine that any further action is desirable 
to place this application in even better condition for issue, the Examiner is encouraged to 
telephone applicants' undersigned representative at the number listed below. 
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PILLSBURY WTNTHROP SHAW PITTMAN LLP 
1650 Tysons Boulevard 
McLean, VA 22102 
Tel: 703/770-7900 



Date: August 3, 2006 



By: 



Respectfully submitted, 

Lawrence D. Eisen 
Registration No. 41,009 



Attachments: None 



LDE/dkp 



Customer No. 00909 



400435241vl 



